$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32783c7c-8a73-32fb-a12d-54f51ac8273a.roa File: 32783c7c-8a73-32fb-a12d-54f51ac8273a.roa (raw, json) Hash identifier: GDzbtXKqGcYAAwnLPKPq9Lz6PY9MS9ur/tbF+BQ3HpA= Subject key identifier: 48:80:7B:DB:82:99:45:58:08:3E:D7:C5:1B:9F:7A:10:A3:C5:C2:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3BA65BA3ADC9359912EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32783c7c-8a73-32fb-a12d-54f51ac8273a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 98.221.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:ba:65:ba:3a:dc:93:59:91:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=05bb3a11-a09a-417c-b9fc-840cd3a1d677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:39:a0:89:eb:16:89:26:12:78:94:5f:b9: 0e:87:db:bc:27:ca:9e:7a:b0:0d:6a:88:8e:27:67: 9f:59:61:df:aa:c5:ee:4c:0b:00:06:29:04:b7:97: 01:ab:af:52:75:74:45:56:cc:bc:52:7a:df:a2:27: 66:78:c9:5f:9e:05:8d:6e:d9:eb:8d:78:85:45:8d: fe:1f:43:0c:75:40:cf:3b:3f:e7:80:3c:a4:61:0f: a1:af:03:c4:21:f2:6c:e1:cd:b7:45:58:8f:94:f0: 1d:5d:bd:a4:b4:dd:6b:6b:ac:8b:00:c1:36:ea:7b: 0d:f9:35:ab:39:37:67:fe:d6:c2:e8:83:39:42:ee: 53:26:47:85:88:8e:18:a0:12:db:e3:87:aa:99:08: 1b:15:5b:af:73:18:8b:46:50:a6:f6:f0:2c:13:ae: e7:23:84:0d:6b:3f:d3:58:fb:5f:6d:ed:f8:de:87: 9a:9f:ba:e0:7f:25:0e:26:1d:7e:1b:70:ed:96:3f: 06:9f:2f:33:2a:14:1d:7d:2f:17:85:8e:92:9d:80: 8a:87:b5:b1:d4:23:01:d1:5f:28:60:e8:1f:ca:0e: 1e:26:d0:52:ec:24:d3:e7:13:f8:e5:05:35:53:04: 15:50:30:97:e5:f9:94:24:47:b3:ea:49:5c:e2:e1: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:80:7B:DB:82:99:45:58:08:3E:D7:C5:1B:9F:7A:10:A3:C5:C2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32783c7c-8a73-32fb-a12d-54f51ac8273a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ef:36:4d:81:76:e3:ec:1b:f5:57:0c:df:de:d4:1f:1b:35: 4b:6a:91:50:04:93:24:fe:7b:3b:0b:1d:7a:6c:71:5b:6d:ea: 52:65:9f:54:99:03:ee:0a:de:b6:41:43:5c:12:db:34:2b:3e: 30:56:bd:2e:9f:12:9b:07:de:0d:8e:52:59:a1:a7:4f:4e:3d: 48:00:e3:97:5c:0b:1e:c3:a3:e0:d2:c2:2d:7d:54:f2:9e:57: 3e:7a:6d:43:4e:3c:27:ac:4b:c7:c4:98:d3:83:59:d9:c1:d4: 5c:31:e4:4d:e4:b6:39:b9:64:e5:73:a4:7d:30:a4:26:22:2a: 1f:5b:e1:11:c5:6a:c2:51:b8:66:4f:6a:f4:13:4e:98:26:a8: 12:83:97:04:41:c0:c2:31:12:e2:22:65:f4:4e:f5:f0:12:e7: ec:69:af:81:51:27:cd:86:1d:af:86:53:4a:dc:08:44:75:cd: 9e:dc:bc:8d:2f:ad:99:d1:7d:c8:77:42:0a:ef:d7:a2:83:8a: c9:44:24:31:84:a5:80:71:f1:c9:91:fe:0a:f7:2f:8a:93:1a: d1:9e:dd:87:7c:52:ee:50:fa:08:09:b0:46:54:55:bb:e9:c7: b9:f4:e5:ad:19:6f:ee:a9:a2:c2:44:d4:77:08:73:35:af:a0: 80:bd:a3:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw7plujrck1mRLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDViYjNhMTEtYTA5YS00MTdjLWI5ZmMtODQwY2QzYTFkNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEo5oInrFokmEniUX7kOh9u8J8qeerANaoiO J2efWWHfqsXuTAsABikEt5cBq69SdXRFVsy8UnrfoidmeMlfngWNbtnrjXiFRY3+ H0MMdUDPOz/ngDykYQ+hrwPEIfJs4c23RViPlPAdXb2ktN1ra6yLAME26nsN+TWr OTdn/tbC6IM5Qu5TJkeFiI4YoBLb44eqmQgbFVuvcxiLRlCm9vAsE67nI4QNaz/T WPtfbe343oean7rgfyUOJh1+G3Dtlj8Gny8zKhQdfS8XhY6SnYCKh7Wx1CMB0V8o YOgfyg4eJtBS7CTT5xP45QU1UwQVUDCX5fmUJEez6klc4uF1SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiAe9uCmUVYCD7XxRufehCjxcJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI3ODNjN2MtOGE3My0z MmZiLWExMmQtNTRmNTFhYzgyNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnvNk2BduPsG/VXDN/e1B8bNUtqkVAEkyT+ezsLHXpscVtt6lJln1SZ A+4K3rZBQ1wS2zQrPjBWvS6fEpsH3g2OUlmhp09OPUgA45dcCx7Do+DSwi19VPKe Vz56bUNOPCesS8fEmNODWdnB1Fwx5E3ktjm5ZOVzpH0wpCYiKh9b4RHFasJRuGZP avQTTpgmqBKDlwRBwMIxEuIiZfRO9fAS5+xpr4FRJ82GHa+GU0rcCER1zZ7cvI0v rZnRfch3Qgrv16KDislEJDGEpYBx8cmR/gr3L4qTGtGe3Yd8Uu5Q+ggJsEZUVbvp x7n05a0Zb+6posJE1HcIczWvoIC9o9s= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:46 2025 by rpki-client